OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is a legitimate development tool for Java Spring Boot applications. It follows best practices such as safe YAML loading and includes standard validation scripts. A low-severity finding is noted for Indirect Prompt Injection surface area, which is inherent to skills with file-writing and command-execution capabilities.
Detected behaviors
No alerts
No issues
6 files scanned · No issues
Score: 93/100 · 2 sections analyzed